Data security plan
IRS Publication 4557 and the FTC Safeguards Rule
The FTC Safeguards Rule applies to tax preparers, and IRS Publication 4557, Safeguarding Taxpayer Data, walks through what it expects, including a written information security plan (WISP). If your firm adopts an AI tool, it belongs in your WISP: who may use it, what data may go into it, how access is controlled and how long data is kept.
- Who may use it
- What data goes in
- Access control
- Retention
Our security overview describes the controls you can reference there.